Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/054db73c-4b93-3159-b8ac-fe4f6027e5fc.roa
File:                     054db73c-4b93-3159-b8ac-fe4f6027e5fc.roa (raw, json)
Hash identifier:          FjaZtxLilak4AsKfw1ARpvC7gGF1ciJxXowpewuF70Q=
Subject key identifier:   CA:B0:E5:34:FB:36:60:0D:F2:FB:FF:B1:16:BE:3C:CF:92:B8:C9:70
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B59A1DA94F6894F87198D2CB8
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/054db73c-4b93-3159-b8ac-fe4f6027e5fc.roa
Signing time:             Mon 29 Sep 2025 01:00:33 +0000
ROA not before:           Mon 29 Sep 2025 01:00:33 +0000
ROA not after:            Sun 28 Dec 2025 02:00:33 +0000
asID:                     36621
IP address blocks:        2001:500:134::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:59:a1:da:94:f6:89:4f:87:19:8d:2c:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 29 01:00:33 2025 GMT
            Not After : Dec 28 02:00:33 2025 GMT
        Subject: CN=1dd0862c-0780-42b5-8cd3-18585690165d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ba:0a:5d:4f:d1:79:18:eb:94:c5:0a:da:f6:
                    c1:61:08:25:9a:6f:26:c5:77:8f:79:b5:13:0e:4f:
                    65:52:0c:fc:cc:4a:4c:b6:6f:3e:39:fe:79:94:cb:
                    1f:cd:57:fe:10:ef:cf:65:ed:2f:f5:6a:1f:9d:e8:
                    62:5e:84:65:47:23:a0:3d:0f:34:95:33:6d:3e:ee:
                    41:83:b0:26:66:13:e6:f1:f0:f8:14:c0:a1:2d:60:
                    79:fc:3f:11:58:d8:78:77:01:eb:3f:69:86:a3:96:
                    bf:1a:b8:5a:b9:fc:fb:b7:47:3d:ec:48:59:e6:fd:
                    12:b6:0b:fa:db:6d:c5:33:68:3b:b8:df:71:12:aa:
                    59:eb:09:7f:23:bd:db:80:98:df:73:99:61:79:dd:
                    af:35:63:53:e1:4e:35:fc:3f:d7:5e:c6:3b:ac:33:
                    ef:3a:7d:76:b0:31:ea:9b:a6:44:29:e0:be:be:c5:
                    77:6d:18:95:1f:42:b9:ed:de:a3:b5:6d:5e:62:e3:
                    c1:d5:be:66:f0:78:90:af:e9:65:82:ae:48:d8:36:
                    f7:16:39:62:2e:32:8e:3f:99:ff:52:ba:7c:e8:47:
                    92:a9:af:53:b2:d6:8c:0f:4f:91:57:44:6d:0b:71:
                    19:68:0a:2a:34:ae:75:8c:f0:89:46:56:1c:2b:41:
                    09:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:B0:E5:34:FB:36:60:0D:F2:FB:FF:B1:16:BE:3C:CF:92:B8:C9:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/054db73c-4b93-3159-b8ac-fe4f6027e5fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:63:1b:67:b8:6a:17:43:21:8d:3c:cf:4a:91:72:06:a7:f3:
         f8:a9:f8:07:f4:17:80:48:2e:08:cc:44:88:69:9d:87:62:21:
         7b:b0:ba:3f:f5:9a:69:c5:fd:62:93:39:9d:35:1b:f2:60:9d:
         0f:a9:5c:2c:55:a4:59:4b:fd:60:63:75:6f:2d:61:a3:64:0c:
         1f:da:77:1b:5a:03:4d:ef:9e:7c:92:f4:bf:2e:b4:74:5c:c3:
         91:6c:31:8f:01:81:0f:07:1c:cd:5d:34:c1:1d:cc:e3:53:1c:
         69:36:d4:ad:a2:71:c5:80:4d:14:e4:05:ce:04:1f:85:7e:da:
         14:b4:dc:74:b3:32:34:95:48:e2:cc:3d:08:fd:f1:dc:62:60:
         29:d0:4d:7f:40:37:2b:fd:ff:49:02:17:bd:ff:c8:bf:9c:66:
         17:4e:29:34:ac:49:27:ce:8b:90:5e:cd:64:51:34:62:14:75:
         18:52:63:a3:c4:c9:39:89:9c:7a:2b:6d:2a:64:2c:fb:e2:a1:
         fb:60:cf:6c:ca:07:ad:5a:a4:9a:43:8e:5d:2a:0e:1e:a6:8f:
         c6:e8:e9:58:9c:46:41:81:50:35:9c:9b:47:2d:66:62:8b:7b:
         fb:39:ca:ec:a4:ca:6d:90:a8:77:e7:8e:ff:06:63:c2:01:c4:
         df:6a:18:56
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtZodqU9olPhxmNLLgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDkyOTAxMDAzM1oXDTI1MTIyODAyMDAzM1owLzEtMCsGA1UEAxMk
MWRkMDg2MmMtMDc4MC00MmI1LThjZDMtMTg1ODU2OTAxNjVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0boKXU/ReRjrlMUK2vbBYQglmm8mxXePebUT
Dk9lUgz8zEpMtm8+Of55lMsfzVf+EO/PZe0v9WofnehiXoRlRyOgPQ80lTNtPu5B
g7AmZhPm8fD4FMChLWB5/D8RWNh4dwHrP2mGo5a/Grhaufz7t0c97EhZ5v0Stgv6
223FM2g7uN9xEqpZ6wl/I73bgJjfc5lhed2vNWNT4U41/D/XXsY7rDPvOn12sDHq
m6ZEKeC+vsV3bRiVH0K57d6jtW1eYuPB1b5m8HiQr+llgq5I2Db3FjliLjKOP5n/
Urp86EeSqa9TstaMD0+RV0RtC3EZaAoqNK51jPCJRlYcK0EJ+QIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFMqw5TT7NmAN8vv/sRa+PM+SuMlwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDU0ZGI3M2MtNGI5My0z
MTU5LWI4YWMtZmU0ZjYwMjdlNWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE0
AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAUYxtnuGoXQyGNPM9KkXIGp/P4qfgH9BeASC4I
zESIaZ2HYiF7sLo/9Zppxf1ikzmdNRvyYJ0PqVwsVaRZS/1gY3VvLWGjZAwf2ncb
WgNN7558kvS/LrR0XMORbDGPAYEPBxzNXTTBHczjUxxpNtStonHFgE0U5AXOBB+F
ftoUtNx0szI0lUjizD0I/fHcYmAp0E1/QDcr/f9JAhe9/8i/nGYXTik0rEknzouQ
Xs1kUTRiFHUYUmOjxMk5iZx6K20qZCz74qH7YM9sygetWqSaQ45dKg4epo/G6OlY
nEZBgVA1nJtHLWZii3v7OcrspMptkKh3547/BmPCAcTfahhW
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:03:40 2025 by rpki-client